]> git.ipfire.org Git - thirdparty/chrony.git/commitdiff
sys_linux: allow ioctl(TCGETS) in seccomp filter
authorMiroslav Lichvar <mlichvar@redhat.com>
Wed, 18 Nov 2015 11:42:38 +0000 (12:42 +0100)
committerMiroslav Lichvar <mlichvar@redhat.com>
Wed, 18 Nov 2015 11:49:11 +0000 (12:49 +0100)
This seems to be needed to allow fopen() called on /dev/urandom to check
if it's a terminal.

sys_linux.c

index 3039a2cca45bbf7fa4207a6029229cd494a543e0..8ac7302867ed4328204290796c169aa55e874924 100644 (file)
@@ -504,7 +504,7 @@ SYS_Linux_EnableSystemCallFilter(int level)
   const static int fcntls[] = { F_GETFD, F_SETFD };
 
   const static unsigned long ioctls[] = {
-    FIONREAD,
+    FIONREAD, TCGETS,
 #ifdef FEAT_PPS
     PTP_SYS_OFFSET,
 #endif